2 min read
Looking “Left of Bang” to Increase Situational Awareness
At Netenrich, part of what we’re doing is looking "left of bang." Bang (!) is geek speak for when we see detonation of malicious content. What...
Read More
2 min read
Situational Awareness Is Key to Faster, Better Threat Detection
Threats start with risks. Understanding risks is really just situational awareness. And that awareness leads to faster and better detection. The...
4 min read
CISOs Must Make Data Analytics a Top Priority
This time of year, people often ask me about highlights from the past year and what to expect in the new year. As I reflect back on major threats and...
3 min read
UEBA, It's Just a Use Case
"UEBA, it’s just a use case." – Netenrich CISO Chris Morales
He’s not wrong. But I’d take it a step further. User entity and behavior analytics (...
5 min read
Cybersecurity Year in Review
I recently sat down and interviewed Sharat Ganesh, Google Security product marketing leader, and Jonas Kelley, head of Americas MSSP partnerships for...
4 min read
Want to Optimize Threat Detection & Response? 5 Patterns vs. 500 Rules
One vendor uses 5 patterns, the other uses 500 rules. What’s better?
Anyone who has configured a SIEM or UEBA (e.g., QRadar, Splunk, ArcSight,...
2 min read
Amp up Security: MITRE’s SOC Strategies Go to 11. But Can We Go Higher?
MITRE strategy 10 says measure performance to improve performance. It’s important to set a baseline of where resources spend their time and energy —...
3 min read
How to Improve Cross-functional Collaboration Between the SOC and IT?
As MITRE points out in strategy 9 of its 11 Strategies of a World-class Cybersecurity Operations Center, cross-functional communication is key to a...
3 min read
Single Pane of Glass Gives a Clear View of Security Operations
Previous strategies in MITRE’s 11 Strategies of a World-class Cybersecurity Operations Center stressed the importance of collecting the right data —...
3 min read
The Goldilocks Principle for Accurate Security Data Collection
Strategy 6 of MITRE’s 11 Strategies of a World-class Cybersecurity Operations Center focuses on cyber threat intelligence (CTI) data. Strategy 7, on...
